Overview

overview

10

Static

static

10

2024-03-29...er.exe

windows7-x64

9

2024-03-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-29_e895270583c5b31e035886a5a02f0764_cryptolocker

  • Size

    31KB

  • Sample

    240329-erj82aaa58

  • MD5

    e895270583c5b31e035886a5a02f0764

  • SHA1

    fbad56aac0ea65d8fd0666d05ac73f102e4b37be

  • SHA256

    43e239058bc1f006237cc11bf82d1e7bc7ed68fd4b69b71b9caa9c89a5cacce7

  • SHA512

    2027fc19b7e702972ab05995a1edab186e174c8d59170c63245eeb72a723c85f16636f7ab08d63f1d2b804c50ccf53b6f4176370592b8d009f30ba328134d433

  • SSDEEP

    768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHy:q0zizzOSxMOtEvwDpj/arqS

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_e895270583c5b31e035886a5a02f0764_cryptolocker

    • Size

      31KB

    • MD5

      e895270583c5b31e035886a5a02f0764

    • SHA1

      fbad56aac0ea65d8fd0666d05ac73f102e4b37be

    • SHA256

      43e239058bc1f006237cc11bf82d1e7bc7ed68fd4b69b71b9caa9c89a5cacce7

    • SHA512

      2027fc19b7e702972ab05995a1edab186e174c8d59170c63245eeb72a723c85f16636f7ab08d63f1d2b804c50ccf53b6f4176370592b8d009f30ba328134d433

    • SSDEEP

      768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHy:q0zizzOSxMOtEvwDpj/arqS

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks